From b621d3658c3581f937c4c23833692d8bffe60cac Mon Sep 17 00:00:00 2001 From: iceBear67 Date: Tue, 14 Jul 2026 18:11:06 +0800 Subject: [PATCH] fix: containers cannot access internet --- image/overlay/etc/nftables.nft | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/image/overlay/etc/nftables.nft b/image/overlay/etc/nftables.nft index 823ee19..efab20b 100644 --- a/image/overlay/etc/nftables.nft +++ b/image/overlay/etc/nftables.nft @@ -70,9 +70,8 @@ table inet filter { chain forward { type filter hook forward priority 0; policy accept; - ip daddr 10.0.0.119 tcp dport {80, 443} accept - ip daddr 10.0.0.119 udp dport 443 accept ip daddr 10.0.0.1 udp dport 53 accept + ip daddr 10.0.0.119 accept # block LAN access from containers. ip daddr 10.0.0.0/24 drop ip daddr 192.168.0.0/16 drop